October marks National Cybersecurity Awareness Month (NCSAM)—a nationwide initiative focused on promoting stronger digital safety practices and empowering individuals and organizations to stay secure in an increasingly connected world.
As technology continues to evolve, so do the risks associated with data protection, privacy, and artificial intelligence. This month, we’re joining the national conversation by highlighting emerging threats, practical safeguards, and evolving regulatory trends to help you and your business stay one step ahead.
Whether you’re managing sensitive data, navigating new compliance requirements, or leveraging AI responsibly, cybersecurity is everyone’s responsibility, and awareness is the first line of defense.
Insights
Texas Senate Bill 140: New Telemarketing Liabilities for Franchisors and Businesses Marketing to Texans
On October 8, 2025, California Gov. Gavin Newsom signed two major privacy-focused bills into law—one requiring all web browsers to include universal opt-out functionality that lets users automatically decline the sale or sharing of personal information across the web, and another mandating that social media platforms treat account deletions as California Consumer Privacy Act requests to remove users’ personal data.
On September 15, 2025, the FTC announced a $7.5 million settlement with educational tech company Chegg for failing to provide reasonable methods for cancelling subscriptions. Among the allegations were that Chegg’s website buried the cancellation options and made it intentionally difficult to complete.
On September 30, 2025, the HHS settled with Cadia Healthcare for $182,000 for failing to obtain a patient’s consent before posting the patient’s “success story,” including pictures, on their public website.
Ransomware attack crippled the city's digital services, leading to a state of emergency and deployment of the Minnesota National Guard's cyber unit. Sensitive documents, including HR files and financial records, were exposed.
Breach exposing business contact information used for communication with potential advertisers and leading to a surge in fake phishing emails targeting Google and Gmail users. The hacking group launched a website this month to extort victims.
Data breaches on Gucci, Balenciaga, and Alexander McQueen were targeted in a ransomware attack via third-party systems connected to the brands rather than directly breaching their core infrastructure.
.png?upscale=true&width=1200&upscale=true&name=HubSpot%20Banners%20(14).png)
%20(6).png?upscale=true&width=1200&upscale=true&name=Hubspot%20Headers%20(600%20x%20100%20px)%20(6).png)
.png?upscale=true&width=320&upscale=true&name=Untitled%20design%20(2).png)
.png?upscale=true&width=240&upscale=true&name=HubSpot%20-%20Digital%20Risk%20Report%20Images%20(2).png)
.png?upscale=true&width=240&upscale=true&name=HubSpot%20-%20Digital%20Risk%20Report%20Images%20(3).png)
%20(8).png?upscale=true&width=1200&upscale=true&name=Hubspot%20Headers%20(600%20x%20100%20px)%20(8).png)
